Your key, your devices, your pictures, and your chat with Rook, all in one place.
How it works
This house knows its people by a key, not a password. When you register, this device makes a key pair for itself: the private half is locked into this device so it cannot be copied out of it, and it never travels. The public half is registered here under its fingerprint. Signing in is the device proving it holds the private half, by signing a one-time challenge. Nothing secret crosses the wire, and there is no password to steal, forget, or reuse.
One key per device: your phone and your computer each register their own. Registration starts with your email: if the house already has it, a one-time link emailed to you ties the new device to your account, with nothing else to fill in. A one-time login link from a device the house already knows does the same job by hand. Your registration keeps a one-way scrambled copy of the site cookie's number on file next to your key, never the number itself, so the house knows this device is one of its registered ones.
How the house treats a key
A key identifies a device, and the registration ties the device to the name you give. Signing in proves the device, every time, without a password. A session lasts two hours. If a device is lost, recovery takes the name, the phrase, and the email on the account, all three matching exactly; a one-time link goes to that email, and the old key is revoked when the link is tapped. There is no master key and no back door.
Finish it here
You opened a one-time link from an email. It finishes whatever you started: registering a device, changing the account email, or recovering an identity. Nothing has happened yet. If you did not ask for this link, just close this page: nothing happens without the tap.
This device is not registered yet.
Register it and you are a known person of the house: recognized at every door, with no password to remember or lose. It takes under a minute, and all it asks is your name, a handle, and a phrase you make up. You do this one time for this device. After that, the house knows this device, and signing in is one tap. We never send spam, and we never sell your information.
Rather not register? Nothing is taken away. You can read the whole house as a guest. Registering only decides whether the house knows you when you come back.
Checking this device…
New here? The order is: 1. Register this device with your name, your handle, and a phrase you make up. 2. Sign in.
Chat with Rook
Talk to Rook right here, on your account. Tell him what you want changed on your profile (your name, your handle, your pictures, your device names) and he will do it and answer in this thread. Rook works at the speed of attention, so an answer can take a while; the thread keeps everything.
For members, this chat opens with Logs, the house currency: 10 Logs to unlock it. Rook speaks first with a summary of your profile, and your first five messages are free. After that, five more messages cost 10 Logs.
Register this device
Start with your email. If the house already has it, you are done filling in forms: the house emails you a one-time link, you tap it, and this device is registered.
The house knows a person by three things: your full name, your handle, and a phrase you make up yourself. Type the same three on any device and the house knows it is you. Each device also gets a name of its own.
Registering a device on an account that already exists? When your name, handle, phrase, and email all match it, the house emails a one-time link to the address on the account. Tap the link and this device finishes on its own. If another of your devices is signed in, it can also confirm you and show a two-digit number to type here.
Your phrase is yours.
The house keeps only a salted hash of your phrase; nobody here can show it to you again. If every device is lost and the phrase is forgotten, there is no way back in. Keep it somewhere safe.
Recover on this device
Your name, your phrase, and the email address on the account. All three must match the account exactly, or recovery will not work here. The name must be typed exactly as you registered it, capitals and all; the phrase is forgiving about capitals. This device gets a fresh key, and the house sends a one-time link to the account email. The tap on that link is what finishes the recovery, and only then is the old key revoked. Your phrase does not change: one phrase per person. The phrase is sent once, over the encrypted connection, only to be checked against the hash the house keeps. It is never stored.
Link your devices
Make a login link here and open it on your other device. Opening it runs the whole setup there: fresh key, cookies set, that device joined to your account, signed in. One open, nothing to type. The house ties the keys to one person, and your standing travels with you.
Join with a login link
A device signed in to your account sent you here. One tap runs the whole setup on this device: a fresh key made, the cookies set, this device joined to your account, and you signed in. If this device gets new recovery words, they are shown once. Write them down.
Your recovery words for this device. Write them down. They are shown once.
Your account
Email on this account: none yet
Setting or changing your email sends a one-time link to the new address, worded as an overwrite. The change lands when the link is tapped, and the old address gets a notice with a one-time stop link.
Your devices
Stop an email change
A stop link from an email brought you here. Nothing has happened yet. If the email change was not yours, tap the button: the old address goes back on the account and the house is alerted.
Your pictures
Two pictures live here, and they are separate on purpose. Your profile picture is the current one, the face the house shows next to your name. Your About photo is the one saved for an About page. Changing either one never changes the other.
The house keeps only a small copy: your browser shrinks the picture before it uploads, and that shrunken copy is the one everyone else is served. No full-size original is stored.